CVE-2019-8269CWE-121

CVE-2019-8269: falha em Kaspersky Lab UltraVNC

Publicada em 09 mar 2019 · Atualizada em 17 set 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.7%

UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.

Produtos afetados

Kaspersky Lab · UltraVNC

CVEs relacionadas — Kaspersky Lab UltraVNC

No mesmo produto, das mais perigosas para as menos.

CVE-2019-8274—CVE-2019-8274EPSS 8.3%CVE-2019-8271—CVE-2019-8271EPSS 8.3%CVE-2019-8273—CVE-2019-8273EPSS 8.3%CVE-2019-8276—CVE-2019-8276EPSS 5.7%CVE-2019-8280—CVE-2019-8280EPSS 4.2%CVE-2019-8275—CVE-2019-8275EPSS 4.0%

Referências

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/https://www.us-cert.gov/ics/advisories/icsa-20-161-06